Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CsrlZwQGJUsDaACy3RYtqB-z2tQ.roa
File: CsrlZwQGJUsDaACy3RYtqB-z2tQ.roa (raw, json)
Hash identifier: GBq1y7OmhSGaxVdz6MIUvDid/XCwD6IiKNU82hXQIG4=
Subject key identifier: 0A:CA:E5:67:04:06:25:4B:03:68:00:B2:DD:16:2D:A8:1F:B3:DA:D4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B7B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CsrlZwQGJUsDaACy3RYtqB-z2tQ.roa
Signing time: Sun 07 Feb 2021 06:21:32 +0000
ROA not before: Sun 07 Feb 2021 06:21:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 210.64.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2939 (0xb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:21:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0ACAE5670406254B036800B2DD162DA81FB3DAD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:02:ab:09:2a:bc:f0:cc:f2:78:ff:ae:39:
81:de:99:d3:92:a5:bc:04:3a:9f:14:ba:40:d0:99:
90:74:fd:4d:1b:f9:9a:6e:a3:3c:38:a6:9e:f5:40:
ba:bf:6f:2e:40:13:9f:65:85:32:48:73:c5:6e:2b:
f8:fe:31:4b:af:36:4a:4a:da:a2:90:55:e1:7a:f8:
6d:a6:e2:bb:39:96:df:54:91:96:26:e9:ab:0c:2c:
0b:99:5c:70:6e:bd:30:b9:7c:b1:63:67:1f:6e:e4:
84:fc:89:21:bd:f7:83:36:e8:85:f9:4a:d0:c5:64:
6f:a9:eb:0b:a9:fe:83:c8:10:af:2c:56:88:eb:ce:
dc:eb:b3:fa:e9:78:ba:da:0e:ba:6e:0c:fb:68:23:
c9:bb:d6:8a:33:0b:57:41:95:93:3e:42:4c:17:a3:
7f:23:60:eb:c3:a0:90:61:e5:29:61:3a:fc:8c:b4:
1f:47:93:0f:4d:63:94:bd:db:6e:67:e2:35:bc:74:
bd:fa:42:57:88:50:b7:dd:f6:10:49:7a:bd:4a:18:
1b:50:fa:38:01:6f:af:b2:7a:41:7a:78:cb:90:22:
92:b9:85:22:67:83:fc:75:8f:32:e6:61:80:4e:47:
c4:85:34:ba:72:75:f3:21:07:a0:f8:b8:85:0c:4d:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:E5:67:04:06:25:4B:03:68:00:B2:DD:16:2D:A8:1F:B3:DA:D4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CsrlZwQGJUsDaACy3RYtqB-z2tQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:44:45:4c:16:1b:d8:20:e7:c1:d4:85:b5:e4:40:f3:92:ca:
0c:a0:bb:fa:10:2a:6e:38:36:92:55:54:25:68:55:4d:64:e2:
7c:78:fd:49:5e:6d:1f:29:b7:07:dd:53:a2:ab:11:a6:a1:4d:
33:da:c1:7e:36:a8:8b:fe:90:71:66:61:be:49:8f:a1:f9:13:
59:c2:7d:f0:f4:79:a2:3d:0b:73:a8:51:1a:2b:cb:41:09:49:
b9:a6:1a:23:19:24:5e:3e:9a:fc:51:de:de:f3:26:24:bb:ff:
7f:17:a2:02:a9:44:af:70:f9:75:34:d6:35:8c:bf:d3:09:9d:
48:26:ed:25:3d:eb:75:0f:6a:8f:c6:44:3e:73:de:92:74:80:
1b:4e:cb:fa:71:75:5d:d6:00:d4:7b:35:be:a7:44:17:5a:45:
c6:ea:5a:ec:da:b4:a2:af:e0:21:13:b2:4b:3f:3a:da:6c:36:
73:59:79:9a:47:6e:b2:ca:9a:18:76:1e:15:a8:a5:40:68:01:
75:56:e4:24:c8:cd:bb:ea:48:bd:c0:89:54:04:0b:98:6c:75:
be:2d:39:13:b1:8b:9e:8c:c8:6e:8d:20:a1:e6:d6:ec:3e:c5:
6b:d3:65:82:df:45:27:86:82:60:2b:6b:74:d3:cb:8f:11:55:
85:03:95:1f
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICC3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcw
NjIxMzJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBBQ0FFNTY3MDQwNjI1
NEIwMzY4MDBCMkREMTYyREE4MUZCM0RBRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmxQKrCSq88MzyeP+uOYHemdOSpbwEOp8UukDQmZB0/U0b+Zpu
ozw4pp71QLq/by5AE59lhTJIc8VuK/j+MUuvNkpK2qKQVeF6+G2m4rs5lt9UkZYm
6asMLAuZXHBuvTC5fLFjZx9u5IT8iSG994M26IX5StDFZG+p6wup/oPIEK8sVojr
ztzrs/rpeLraDrpuDPtoI8m71oozC1dBlZM+QkwXo38jYOvDoJBh5SlhOvyMtB9H
kw9NY5S9225n4jW8dL36QleIULfd9hBJer1KGBtQ+jgBb6+yekF6eMuQIpK5hSJn
g/x1jzLmYYBOR8SFNLpydfMhB6D4uIUMTfzVAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUCsrlZwQGJUsDaACy3RYtqB+z2tQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ3NybFp3UUdKVXNEYUFDeTNSWXRx
Qi16MnRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANJAMA0G
CSqGSIb3DQEBCwUAA4IBAQBtREVMFhvYIOfB1IW15EDzksoMoLv6ECpuODaSVVQl
aFVNZOJ8eP1JXm0fKbcH3VOiqxGmoU0z2sF+NqiL/pBxZmG+SY+h+RNZwn3w9Hmi
PQtzqFEaK8tBCUm5phojGSRePpr8Ud7e8yYku/9/F6ICqUSvcPl1NNY1jL/TCZ1I
Ju0lPet1D2qPxkQ+c96SdIAbTsv6cXVd1gDUezW+p0QXWkXG6lrs2rSir+AhE7JL
PzrabDZzWXmaR26yypoYdh4VqKVAaAF1VuQkyM276ki9wIlUBAuYbHW+LTkTsYue
jMhujSCh5tbsPsVr02WC30UnhoJgK2t008uPEVWFA5Uf
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org